Threats tagged 'ghsa-74xr-8gm8-4rwv'

Ettercap versions up to 0.8.4.1 have a vulnerability in the sslw_remove_sts() function that causes out-of-bounds reads and size_t underflow due to improper handling of Strict-Transport-Security headers. This flaw can lead to memory corruption when Ettercap intercepts HTTPS traffic from a malicious server. The vulnerability affects the Ettercap process, which typically runs with root privileges, potentially allowing an attacker to cause denial of service or other impacts.